Snort Signature Manager
Wednesday, June 18th, 2008As far as I know, there’s really nothing that does this — at least nothing that does it the way I want to. As I have mentioned, Aanval has this functionality, but it is … horrible… at best. I’ve been working on writing a web-based signature management interface for the last few weeks. I currently have something that is stable, though slightly buggy. It’s not nearly done — I’ll likely make many changes in the near future. (Most noteably, support for multiple policies with inheritence.) Just in case anyone stumbles upon this and wants to help/try it, I’ve uploaded the code to http://www.uri.edu/security/software/sigmanager.tar.gz. …